Cookie policy
Last updated 21 September 2026
Onarvo Ltd trading as ContractWindow sets two cookies. Both are strictly necessary to run the service, neither is used for advertising or tracking, and there is no third party analytics on this site. That is why you are not being asked to accept anything.
1The cookies we set
| Name | What it does | Expires | Type |
|---|---|---|---|
| cw_session | Keeps you signed in. Holds a random token only, never your email or password. | 30 days | Strictly necessary |
| cw_org | Remembers which organisation you are working in when you belong to more than one. | 1 year | Strictly necessary |
Both are set with HttpOnly, so no script on the page can read them, and SameSite=Lax, so they are not sent from other sites. In production they are also marked Secure and only travel over HTTPS.
2Things stored in your browser that are not cookies
Two preferences are kept in your browser's local storage and never sent to us: cw-theme for light or dark mode, and cw-sidebar for whether you collapsed the sidebar. Clearing your site data resets both, and nothing else changes.
3Why there is no consent banner
Under the Privacy and Electronic Communications Regulations, consent is required for cookies that are not strictly necessary for a service you asked for. Signing in and staying signed in is that service. We set nothing for analytics, advertising, profiling or cross-site tracking, so there is nothing to consent to. If that ever changes we will ask before setting anything, not after.
4Payment pages
Paying takes you to Stripe's own checkout on checkout.stripe.com. Stripe sets its own cookies there, on its own domain, for fraud prevention and to keep the payment session together. We never see them. Stripe explains them at stripe.com/legal/cookies-policy.
5Turning them off
Every browser lets you block or delete cookies, usually under Settings, then Privacy. If you block ours, the site still works for reading, but you will not be able to stay signed in, so the radar, the workbench and your account will be out of reach.
6Questions
Email support@contractwindow.com or use the contact form. What we do with personal data, as opposed to cookies, is in the privacy notice.